Vulnerability Description
A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's account to recover previously sent messages. This behavior requires independent knowledge of metadata for previous messages, which are not available publicly. This issue affects WhatsApp for Android 2.19.52 and 2.19.54 - 2.19.103, as well as WhatsApp Business for Android starting in v2.19.22 until v2.19.38.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| >= 2.19.54, <= 2.19.103 | ||
| Whatsapp Business | >= 2.19.22, <= 2.19.38 |
Related Weaknesses (CWE)
References
- https://www.facebook.com/security/advisories/cve-2019-3566Third Party Advisory
- https://www.facebook.com/security/advisories/cve-2019-3566Third Party Advisory
FAQ
What is CVE-2019-3566?
CVE-2019-3566 is a vulnerability with a CVSS score of 5.9 (MEDIUM). A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's account to recover previously sent messages. This behavior requ...
How severe is CVE-2019-3566?
CVE-2019-3566 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3566?
Check the references section above for vendor advisories and patch information. Affected products include: Whatsapp Whatsapp, Whatsapp Whatsapp Business.